{
  "schemaVersion": 1,
  "site": "https://cveboard.org",
  "generatedAt": "2026-10-23T20:15:52.474Z",
  "lastRun": "2026-10-23T20:01:03.754Z",
  "liveDays": 14,
  "filters": {
    "kind": null,
    "exploited": false,
    "severity": null,
    "ecosystems": [],
    "tag": "podman-container-tools"
  },
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "incidents": [
    {
      "id": "cve-2026-94603",
      "url": "https://cveboard.org/i/cve-2026-94603",
      "urlPt": "https://cveboard.org/pt/i/cve-2026-94603",
      "json": "https://cveboard.org/i/cve-2026-94603.json",
      "kind": "vuln",
      "live": true,
      "knownExploited": false,
      "severity": "critical",
      "title": "Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation",
      "summary": "Podman v4.4.0 added a feature where container checkpoints (from the podman container checkpoint command) could be distributed via OCI registry, and pulled from that registry and run via the podman run command. This allowed easy transfer of checkpoints between systems. However, checkpoints allow complete control of how the container is created - including full control of the container sandbox.",
      "titlePt": "Podman: O comando `podman run` pode ser instruído a desabilitar quase todo o sandboxing por meio de anotação de imagem",
      "summaryPt": "O Podman v4.4.0 adicionou um recurso onde pontos de verificação de contêineres (do comando podman container checkpoint) poderiam ser distribuídos via registro OCI, e puxados desse registro e executados via o comando podman run. Isso permitiu a transferência fácil de pontos de verificação entre sistemas. No entanto, os pontos de verificação permitem controle total sobre como o contêiner é criado - incluindo controle total do sandbox do contêiner.",
      "affected": [],
      "omitted": 0,
      "references": [],
      "cwes": [
        {
          "id": "CWE-693",
          "name": "Protection Mechanism Failure"
        }
      ],
      "ssvc": {
        "exploitation": "none",
        "automatable": "yes",
        "impact": "total",
        "at": "2026-10-13T20:19:31.021Z"
      },
      "fix": "listed",
      "tags": [
        "podman-container-tools",
        "go"
      ],
      "cves": [
        "CVE-2026-94603"
      ],
      "ghsa": "GHSA-2cvf-wqm6-wr9g",
      "cvss": {
        "score": 10,
        "version": "3.1",
        "by": "GitHub"
      },
      "epss": {
        "percentage": 0.00918,
        "percentile": 0.59887,
        "asOf": "2026-10-23",
        "by": "FIRST"
      },
      "packages": [
        {
          "ecosystem": "go",
          "name": "github.com/containers/podman",
          "vulnerable": ">= 4.4.0, < 5.8.8",
          "fixed": "5.8.8",
          "advisory": "GHSA-2cvf-wqm6-wr9g"
        },
        {
          "ecosystem": "go",
          "name": "go.podman.io/podman/v6",
          "vulnerable": ">= 6.0.0, < 6.1.3",
          "fixed": "6.1.3",
          "advisory": "GHSA-2cvf-wqm6-wr9g"
        }
      ],
      "vendor": "podman-container-tools",
      "product": "podman",
      "kev": null,
      "breach": null,
      "retracted": false,
      "sources": [
        {
          "label": "GitHub Advisory Database",
          "url": "https://github.com/advisories/GHSA-2cvf-wqm6-wr9g"
        }
      ],
      "cvePending": true,
      "publishedAt": "2026-10-15T20:22:16.000Z",
      "updatedAt": "2026-10-15T20:22:16.000Z"
    }
  ],
  "tag": {
    "tag": "podman-container-tools",
    "name": "podman-container-tools",
    "kev": null
  }
}